add authorization and user privileges